8499bc8a58223dc26855a3a2c34de0606d16a2bcc1ec604b49479269c628e2af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8499bc8a58223dc26855a3a2c34de0606d16a2bcc1ec604b49479269c628e2af
Size

119KB
MD5

079a0ae3d2885fe9a1aebf127ab53f61
SHA1

a92cb2716af50e96730bdc5de228d65c7c4110e6
SHA256

8499bc8a58223dc26855a3a2c34de0606d16a2bcc1ec604b49479269c628e2af
SHA512

5dd06ae756496a5c724bf29e7eb13f3567340628be18aadfd5a401deab8fd0b8a0c8ec0afec5fc9b9989aab31e4f3ddbde7f974b123db40dc6440241e4b001df
SSDEEP

3072:tO/Iwu49/OhP1M8/BxfsXa3MXX6AbM2p99lCuLOqcaUuzE/22:tO041OhP19L04MXXHbdvL+uge2

Score

N/A

Malware Config

Signatures

Files

8499bc8a58223dc26855a3a2c34de0606d16a2bcc1ec604b49479269c628e2af
.exe windows x86

573e38d27207a32913ff76585abebcff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
InterlockedFlushSList
GetComputerNameExA
AllocateUserPhysicalPages
SetInformationJobObject
MoveFileW
GetConsoleProcessList
SetEnvironmentVariableA
EraseTape
OutputDebugStringW
FindNextVolumeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE